Agent task: define M2 SourceOS Recovery Installer packaging spec

[mdheller]

Target repo

SourceOS-Linux/sourceos-boot

Context

NLBoot integration docs and fixtures are now merged. The next M2 platform-proof slice is a packaging spec for SourceOS normal boot and SourceOS Recovery/Installer entries on Apple Silicon, aligned with the Asahi-style boot picker/install flow and the SourceOS/NLBoot evidence model.

Scope

Implement the smallest bounded change that does the following:

1. Add docs/M2_RECOVERY_INSTALLER_PACKAGING.md.
2. Define SourceOS normal entry and SourceOS Recovery/Installer entry packaging responsibilities.
3. Map required inputs: BootReleaseSet, ReleaseSet, NLBoot plan, artifact cache evidence, AppleSiliconAdapterEvidence, BootProofRecord.
4. Add dry-run example fixtures only. No host mutation.
5. Add or update make validate so examples are syntax-checked.
6. Update repo.maturity.yaml next actions.

Acceptance criteria

• make validate passes.
• PR body includes validation evidence.
• M2 is first-class but not the only platform target.
• No real boot-entry, disk, installer, rollback, kexec, or host-changing behavior is implemented.

Validation commands

make validate

Boundaries / non-goals

• Do not implement real Apple Silicon boot-entry mutation.
• Do not implement installer disk writes.
• Do not implement rollback execution.
• Do not duplicate canonical schemas from SourceOS-Linux/sourceos-spec; reference them.
• One PR only.

[mdheller]

@codex Please take this in the SourceOS boot Codex environment. One PR: M2 SourceOS Recovery/Installer packaging spec, dry-run fixtures, validation update, and maturity next-actions. Inspect the repo first and include validation evidence.

[mdheller]

@copilot Assignment is active. Please open one bounded PR for this issue with validation evidence. Keep it docs/fixtures/validation only; no host-changing behavior.

[chatgpt-codex-connector]

Summary

• Added a new bounded spec document at docs/M2_RECOVERY_INSTALLER_PACKAGING.md that defines dry-run packaging responsibilities for SourceOS normal boot and SourceOS Recovery/Installer entries, explicitly maps required inputs (BootReleaseSet, ReleaseSet, NLBoot plan, artifact cache evidence, AppleSiliconAdapterEvidence, and BootProofRecord), and states non-goals to avoid host mutation. docs/M2_RECOVERY_INSTALLER_PACKAGING.mdL1-L97
• Added dry-run example fixtures under examples/m2-recovery-installer/:
  • packaging-inputs.example.json (inputs/evidence references for M2 packaging planning). examples/m2-recovery-installer/packaging-inputs.example.jsonL1-L37
  • packaging-output.example.json (illustrative normal and recovery/installer package outputs with proof/evidence refs). examples/m2-recovery-installer/packaging-output.example.jsonL1-L27
• Updated make validate to syntax-check both new JSON fixtures (no host-changing behavior added). MakefileL3-L14
• Updated repo.maturity.yaml evidence and next-actions to include this M2 packaging slice and its schema-bound follow-up work. repo.maturity.yamlL11-L52
• Committed changes on the current branch with commit message: Add M2 recovery/installer packaging dry-run spec and fixtures.

Testing

• ✅ make validate
  (BootReleaseSet validation passed, both new JSON fixtures parse successfully, and nlboot adapter CLI dry-run path executed.)

View task →